Darren Mutz William K. Robertson Giovanni Vigna Richard A. Kemmerer Exploiting Execution Context for the Detection of Anomalous System Calls. 1-20 2007 conf/raid/2007 RAID http://dx.doi.org/10.1007/978-3-540-74320-0_1 db/conf/raid/raid2007.html#MutzRVK07